DAS-C01 · Question #186
A manufacturing company is storing data from its operational systems in Amazon S3. The company's business analysts need to perform one-time queries of the data in Amazon S3 with Amazon Athena. The com
The correct answer is A. Establish an AWS Direct Connect connection between the on-premises network and the VPC. D. Configure the JDBC connection to use an interface VPC endpoint for Athena.. The policy constraint is that traffic cannot traverse the public internet. Two components must be addressed: (1) the physical/network path from on-premises to AWS, and (2) the endpoint used to reach Athena inside AWS. Option A (AWS Direct Connect) establishes a dedicated private
Question
A manufacturing company is storing data from its operational systems in Amazon S3. The company’s business analysts need to perform one-time queries of the data in Amazon S3 with Amazon Athena. The company needs to access the Athena network from the on-premises network by using a JDBC connection. The company has created a VPC Security policies mandate that requests to AWS services cannot traverse the Internet. Which combination of steps should a data analytics specialist take to meet these requirements? (Choose two.)
Options
- AEstablish an AWS Direct Connect connection between the on-premises network and the VPC.
- BConfigure the JDBC connection to connect to Athena through Amazon API Gateway.
- CConfigure the JDBC connection to use a gateway VPC endpoint for Amazon S3.
- DConfigure the JDBC connection to use an interface VPC endpoint for Athena.
- EDeploy Athena within a private subnet.
How the community answered
(34 responses)- A56% (19)
- B12% (4)
- C6% (2)
- E26% (9)
Explanation
The policy constraint is that traffic cannot traverse the public internet. Two components must be addressed: (1) the physical/network path from on-premises to AWS, and (2) the endpoint used to reach Athena inside AWS. Option A (AWS Direct Connect) establishes a dedicated private network connection from the on-premises network to the VPC, replacing the public internet path. Option D (interface VPC endpoint for Athena) creates a private DNS-enabled endpoint inside the VPC so JDBC connections reach Athena's API over AWS's private network rather than the public internet. Option B (API Gateway) is not a valid intermediary for Athena JDBC. Option C (gateway VPC endpoint for S3) helps route S3 traffic privately but does not address the Athena connection itself. Option E is incorrect because Athena is serverless and cannot be deployed inside a subnet.
Topics
Community Discussion
No community discussion yet for this question.